Cybersecurity Specialist - R4645
World Wildlife Fund, Inc. Quito, Ecuador
Non-profit Organizations · 1,001-5,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Cybersecurity Specialist monitors and analyzes security alerts across endpoints, cloud services, and networks to maintain the organization's security posture. They also manage the Information Security Management System and provide guidance to stakeholders on secure technology use and risk mitigation.
What they look for
Requirements
Candidates must have at least 4 years of experience in cybersecurity and be bilingual in English and Spanish. Proficiency with security tools like SIEM, SOAR, and EDR, along with knowledge of regulatory frameworks like GDPR and PCI, is required.
Full description
Job Description
Title: Cybersecurity Specialist
Job Family/Level: Information Technology/Specialist
Reports To: VP, Corporate Information Security
PLEASE NOTE: Must be bilingual (Spanish & English) + submit Cover Letter and Resume in English
Major Function
The Cybersecurity Specialist is responsible for supporting cybersecurity initiatives, including monitoring, analyzing, and enhancing the security posture of WWF's information systems, endpoints, cloud services, and data environments. The role involves working closely with Cybersecurity, Information Technology, Compliance and Risk Management, and stakeholders to implement and maintain security policies, procedures, controls, and tools. A crucial part of the role is supporting and managing the Information Security Management System (ISMS), ensuring that security policies, procedures, controls, and supporting documentation are aligned with industry standards, organizational requirements, and best practices. The role also serves as a cybersecurity advisor to stakeholders by providing guidance on secure technology use, endpoint protection, security awareness, vulnerability management, and responsible use of data.
Key Responsibilities
- Monitor and analyze security alerts, logs, and events across endpoints, cloud services, networks, applications, and enterprise platforms.
- Support incident investigations, root cause analysis, evidence review, remediation tracking, and post-incident lessons learned.
- Support in developing and revising documentation of security procedures, processes, standards, assessment results, incident response activities, and control implementation.
- Advise on the Information Security Management System (ISMS), ensuring policies, controls, procedures, and supporting documentation remain aligned with industry standards and best practices.
- Ensure compliance support for regulatory and framework requirements such as CIS, PCI, ISO, GDPR, and other applicable standards.
- Participate in internal and external security audits, assessments, control reviews, and maturity evaluations, and track remediation activities as needed.
- Serve as a cybersecurity advisor to country offices, business units, IT teams, and other stakeholders by providing practical guidance on security best practices, risk mitigation, secure technology use, and adherence to organizational policies.
- Collaborate with WWF offices and teams to identify security vulnerabilities, assess risks, and support implementation of appropriate security controls.
- Report on cybersecurity maturity, risk posture, control implementation, and alignment with applicable frameworks such as the CIS Critical Security Controls.
- Stay up to date on cybersecurity trends, emerging threats, attacker tactics, security technologies, industry trends, and regulatory developments.
- Coordinate and support security awareness training programs, campaigns, and communications that promote a culture of security and responsible use of data.
- Create or contribute to awareness materials such as presentations, guidance documents, newsletters, videos, online learning content, and staff communications.
- Collaborate with cross functional teams to ensure secure information systems.
- Support in evaluating and implementing new security tools, technologies, controls, and mitigations.
- Performs other duties as assigned.
Key Competencies
- Inclusive Collaboration: Builds and strengthens a culture of inclusion within and across teams by valuing diverse perspectives, encouraging active participation, and collaborating effectively with technical and non-technical colleagues.
- Growth Mindset and Adaptability: Demonstrates a proven ability to learn and adapt quickly to new technologies and opportunities, applying evolving knowledge in cloud, automation, and security to strengthen WWF’s technical capabilities.
- Solution-Oriented Problem Solving: Demonstrates strong troubleshooting skills, taking a structured approach to identifying root causes, evaluating solutions, and resolving technical problems across and multi-cloud environments.
Qualifications
Skills and Abilities
- REQUIRED:
- 4+ years of experience in Cybersecurity or equivalent experience is required. (A Bachelor's degree in Computer Science or Information Technology HILGHY preferred)
- Bilingual: Strong verbal and written communication skills, in ENGLISH and SPANISH.
- Proven experience with cybersecurity technologies required.
- Familiarity with regulatory and compliance requirements such as PCI, CCPA, GDPR.
- Experience configuring, deploying and using multiple security solutions such as SIEM, SOAR, playbooks and Endpoint Detection and Response (EDR) tools.
- In depth knowledge of cloud services, third party risk management, and application security.
- Advanced understanding and proficiency with Windows and macOS operating systems.
- Strong organizational, documentation, project management skills including development of detailed project plans.
- PREFERRED:
- Additional security certifications.
- International travel is possible.
Additional Information
Identifies and aligns with WWF’s core values:
- COURAGE – We demonstrate courage through our actions, we work for change where it’s needed, and we inspire people and institutions to tackle the greatest threats to nature and the future of the planet, which is our home.
- INTEGRITY – We live by the principles we call on others to meet. We act with integrity, accountability, and transparency, and we rely on facts and science to guide us and to ensure that we learn and evolve.
- RESPECT – We honor the voices and knowledge of people and communities that we serve, and we work to secure their rights to a sustainable future.
- COLLABORATION – We deliver impact at the scale of the challenges we face through the power of collective action and innovation.
Please note: Candidates must be currently based and authorized to work in one of the following countries to be eligible for this position: Bolivia, Chile, Ecuador, Guatemala, Belize, Honduras, Mexico, Paraguay, Suriname, or Guyana.
Remuneration: Salary and benefits for this position will be paid in local currency.
Application instructions: Resumes and cover letters must be submitted in English to be considered for this position
Please note: Applicants must be legally authorized to work in the job's location. Position is not eligible for employment visa sponsorship.
World Wildlife Fund (WWF) promotes equal employment opportunities for all qualified individuals regardless of age, race, color, sex, religion, national origin, disability, or any other characteristic protected under applicable law.
- Paid Relocation: None
Similar roles
-
Senior Technical Account Manager, OT Cybersecurity
Dispel United States · $120K–$145K/yr
-
Cybersecurity Operations Manager
Milliman Dallas, Texas, United States · $150K–$285K/yr
-
Security Engineer (Cross-Functional) - SME
Accenture Federal Services Chantilly, Virginia, United States · $110K–$214K/yr
-
Cybersecurity Data Protection Governance and HVIA Manager
Cummins Indianapolis, Indiana, United States
-
Senior Information Systems Security Engineer
MANTECH Huntsville, Alabama, United States
-
Application Security Engineer II (Contract - 5 months )
Bugcrowd India